PDA

View Full Version : Well AVG seemed to be first out with a Beagle.AI cleanup tool...


Marbh
07-19-04, 02:55 PM
All the millions of dollars of maintenance fees that people feed Symantec, and they still don't have definitions, much less a cleanup tool, but AVG has both.

Talius
07-19-04, 06:08 PM
I got my company the tool this afternoon as our office got a few infections from careless clickers. I started giving the AVG speal to everyone I saw in the IT Department (where I work).

AVG should really hire me.

Aidden
07-19-04, 06:10 PM
For as much as I love the product, I am really starting to hate the company..

I thnak god every day that their engineerds have their heads on straight because the sales staff are a bunch of !@#$tards..

Marbh
07-19-04, 07:41 PM
Yes but in most other companies the sales tards have seized the helm completely.

Aidden
07-19-04, 07:43 PM
good point

PsiKoTicK
07-19-04, 09:26 PM
I just wish they had a 1800 number for support, the whole "wait til we respond to your e-mail" drives me crazy.. :\

Oh, and that the program would delete parent files of viruses. Like Bi.exe, has 2 files that are counted viruses contained within it (bi.dll and something else). Until recently, it would NOT delete the bi.exe, it would just come up with an error on trying to remove the 2 contained files. They finally fixed that. There's a new one out now, that's bi9.exe.. same issue happening

Sucks.. :(

Pratell
07-19-04, 09:47 PM
corky!

InvisiBill
07-20-04, 07:46 AM
http://vil.nai.com/vil/stinger/

Stinger handles it too, as of 7-19.

Marbh
07-20-04, 01:05 PM
Almost all the companies have a fix now, but AVG was Johnny on the Spot. I spent a good portion of yesterday doing a rotation between Symantec(fix around 10ish PM or so)-McAffee (who had the 7/17 stinger up most of day), Sophos (who at least had server product upgrades ready by noon), Trend, F-Secure (Czech site had some info but Czech only), and AVG.

InvisiBill
07-22-04, 06:36 AM
I created a new .inf file to remove .af, .ag, and .ai. http://files.invisibill.net/unbagle.af.ag.ai.inf will remove the startup calls from the registry and the files directly called by them (if not in use). There are still other related files, as well as the actual email attachment and/or network share files that spread the infection, which my script won't do anything about. You still need a virus scanner to find and remove everything else, but this script should remove the startup stuff at least, so it won't be running and trying to kill your firewall and AV programs.

Just save the file somewhere convenient, then right-click and choose Install. If you don't trust me for whatever reason, you can open the script with any text editor and see that it just tries to delete three registry entries and three files. Once you've "installed" it, reboot. Your machine will still have virus-related files on it, but they shouldn't autorun after you reboot, allowing you to more easily clean your system.

http://www.invisibill.net/2004_07_01_blogarchive.html#109050275993762389